icecube

Thanks, have some ideas to play around with now.

How do you manage users for exams? Server 2016 AD Just add a new group with users used for exams specifically? User needs to login with an "empty" desktop - almost like clean install except with all needed software. Can this done with AD or GP?

Was hoping for more scripting type solution, would help me learn more as i go on.

Thanks will look into this

Need help deploying exe (unable to create msi) to install on workstations. Should be able to read current Product Version of file & compare to one to be installed. If the same then stop if newer then install. Write to log file etc... Any help pointing in right direction would be appreciated.

Came across this, will try in the morning. Step 1: Create new group and apply the policy 1. Create a new policy in GPMC by right-clicking your domain and pressing New. Name the policy No Internet. 2. Right-click No Internet and press Enforced to check it. 3. Select No Internet in the left-hand pane, select Authenticated Users under Security Filtering and press Remove, and OK to prevent the policy from applying. 4. Using Group Policy to implement Internet Explorer settings, navigate to User Configuration / Windows Settings / Internet Explorer Maintenance in the No Internet policy. 2. Right-click Internet Explorer Maintenance and press Preference Mode. NOTE: If a policy is already defined, you must press Reset Browser Settings, which will reset any Internet Explorer Maintenance Group Policy, before you press Preference Mode. 3. Navigate through Connections and double-click Proxy Settings (Preference Mode). 4. Check Enable proxy Settings, Use the same proxy server for all addresses, and Do not use proxy server for local (intranet) addresses. 5. Type 127.0.0.1 into Address of proxy and 80 into Port. 6. Press OK. 7. Close the No Internet group Policy.

How would you go about restricting internet access to certain Groups & granting access to other Groups? Server currently has 2 network connections - 1 going to switch where all clients connected to - 1 going to DSL router for internet access

Thanks, will read up a bit more on it & test on my virtual setup before deploying on actual system.

Wont that save to Profile folder? Or can I redirect to Home Folder? Im a bit new to MS Server, sorry for the many questions.

But you still get users who will store most documents/files in there. How do you curb this? Or would you apply a quota of some sorts? Other than trying them to save in Home folder? Also can one have AD auto create Documents, Pictures etc.. folders in Home folder?

Yip knew that one. But they can store documents in Roaming Profile as well, or am I wrong?

Im currently playing with setup in virtualbox to test whatever I learn & then implement on server. Don't quite get you when you say home directories - I have c:\Profiles\%username% set as Roaming Folder. Im guessing its the same.

Can I also create another security group for roaming profiles?

Have gone your route, thanks. Created a Shared Folders OU > Shared Grade Folder (Specific Folder For Each Grade) Then create a Security Group for each specifying access. Am I correct in going this way?

I Will try this setup & give it a test run. Now to search for easy script to add multiple users